# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1924

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1925

---

## [Help with query touching 2 indexes (like an exists join in sql)](https://discuss.elastic.co/t/help-with-query-touching-2-indexes-like-an-exists-join-in-sql/103571)

<div class="topic-metadata">

**Author:** [@ptnewman](https://discuss.elastic.co/u/ptnewman)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 3:16pm UTC](https://discuss.elastic.co/t/help-with-query-touching-2-indexes-like-an-exists-join-in-sql/103571 "2017-10-11T15:16:48Z")

</div>

i have a requirement to retrieve documents that a user has permissions to - not the elastic user but a user of our application. in our case, there are accounts and users, users have access to 1 or more accounts wit…

---

## [Suggestion needed for geo\_shape mapping](https://discuss.elastic.co/t/suggestion-needed-for-geo-shape-mapping/103246)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 2:52pm UTC](https://discuss.elastic.co/t/suggestion-needed-for-geo-shape-mapping/103246 "2017-10-11T14:52:03Z")

</div>

Hi, I am trying to store road geometry as linestring (geo\_shape). I would index millions of road geometries in the geometry field of my documents. Each road will have its separate document. While going through referenc…

---

## [Updating Parents](https://discuss.elastic.co/t/updating-parents/103570)

<div class="topic-metadata">

**Author:** [@magarcia1964](https://discuss.elastic.co/u/magarcia1964)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 2:50pm UTC](https://discuss.elastic.co/t/updating-parents/103570 "2017-10-11T14:50:28Z")

</div>

Hi, I have following question is it possible to change the parent of a document, that have children without loosing the relationship? Best Regards Marco

---

## [Field collapsing and documents ordering](https://discuss.elastic.co/t/field-collapsing-and-documents-ordering/103569)

<div class="topic-metadata">

**Author:** [@Anatoly\_Petkevich](https://discuss.elastic.co/u/Anatoly_Petkevich)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 2:36pm UTC](https://discuss.elastic.co/t/field-collapsing-and-documents-ordering/103569 "2017-10-11T14:36:47Z")

</div>

Hi, Field collapsing is very usefull feature but I've faced a results sorting issue. Let there is a lot of documents with user and date fields. I need to collapse documents by user field and sort results by date in …

---

## [Will Elasticserach PHP be Supported in Elastic 6?](https://discuss.elastic.co/t/will-elasticserach-php-be-supported-in-elastic-6/103564)

<div class="topic-metadata">

**Author:** [@guardhunt](https://discuss.elastic.co/u/guardhunt)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 2:34pm UTC](https://discuss.elastic.co/t/will-elasticserach-php-be-supported-in-elastic-6/103564 "2017-10-11T14:34:32Z")

</div>

Simple question. I am looking at implementing Elasticserach PHP with my PHP web application to conduct product website searches and I wanted to know if it will be supported in Elasticserch 6?

---

## ["not\_x\_content\_exception" while trying to PUT simple file with column mappings into ES via cURL](https://discuss.elastic.co/t/not-x-content-exception-while-trying-to-put-simple-file-with-column-mappings-into-es-via-curl/103537)

<div class="topic-metadata">

**Author:** [@Mikhail](https://discuss.elastic.co/u/Mikhail)\
**Replies:** 7\
**Last updated:** [October 11, 2017, 2:16pm UTC](https://discuss.elastic.co/t/not-x-content-exception-while-trying-to-put-simple-file-with-column-mappings-into-es-via-curl/103537 "2017-10-11T14:16:41Z")

</div>

Good day! I'm a newbie in ELK and got stuck on the task that seemed to be a simple one on the first sight but that is not how it turned out. What am I trying to do: I have a table with test data in MS SQL Server and I…

---

## [Not connecting http://localhost:9200 on Windows 2016 and Elasticsearch 5.6](https://discuss.elastic.co/t/not-connecting-http-localhost-9200-on-windows-2016-and-elasticsearch-5-6/103078)

<div class="topic-metadata">

**Author:** [@MISMIS](https://discuss.elastic.co/u/MISMIS)\
**Replies:** 2\
**Last updated:** [October 11, 2017, 11:01am UTC](https://discuss.elastic.co/t/not-connecting-http-localhost-9200-on-windows-2016-and-elasticsearch-5-6/103078 "2017-10-11T11:01:29Z")

</div>

Installation went well and elasticsearch service is running. http://localhost is good. http://localhost:9200 - I received IE browser username and password prompt. I tried to reduce security, but that is not going away…

---

## [Can elasticsearch create its log file again?](https://discuss.elastic.co/t/can-elasticsearch-create-its-log-file-again/103534)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 11:00am UTC](https://discuss.elastic.co/t/can-elasticsearch-create-its-log-file-again/103534 "2017-10-11T11:00:40Z")

</div>

Hello. I removed "elasticsearch.log" file under "/var/log/elasticsearch/" and when I restart my system or elasticsearch service then it can't be create. Any idea? Thank you.

---

## [ElasticSearch multiple path.data not storing in all directories](https://discuss.elastic.co/t/elasticsearch-multiple-path-data-not-storing-in-all-directories/103526)

<div class="topic-metadata">

**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\
**Replies:** 5\
**Last updated:** [October 11, 2017, 10:14am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-path-data-not-storing-in-all-directories/103526 "2017-10-11T10:14:04Z")

</div>

I have 3 nodes of ElasticSearch v5.5 (node0, node1, node2) I have set path.data to 5 different directories for each node on CentOS 7 i.e. /elk\_data0, /elk\_data1, /elk\_data2, /elk\_data3, /elk\_data4 My problem is data i…

---

## [Elasticsearch 2.3.4 plugin test error](https://discuss.elastic.co/t/elasticsearch-2-3-4-plugin-test-error/103527)

<div class="topic-metadata">

**Author:** [@8a98bb2968a03fe24acf](https://discuss.elastic.co/u/8a98bb2968a03fe24acf)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 9:55am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-4-plugin-test-error/103527 "2017-10-11T09:55:10Z")

</div>

hi there i developed elasticseach 2.3.4 plugin i want to run my elasticsearch plugin unit test code i build it with gradle because of an error, i edited my code simply this is my simple test code public class Clust…

---

## [What to do about a .watches dangling index](https://discuss.elastic.co/t/what-to-do-about-a-watches-dangling-index/103046)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 9:54am UTC](https://discuss.elastic.co/t/what-to-do-about-a-watches-dangling-index/103046 "2017-10-11T09:54:15Z")

</div>

In the process of doing a rolling restart of my cluster, I am now seeing a dangling index error on one of my nodes. \[2017-10-06T16:23:00,190\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[ES149\] \[\[.watches/i1GOvi3HRuiKaP3v6-D7OQ\]…

---

## [More\_like\_this search doesn't work](https://discuss.elastic.co/t/more-like-this-search-doesnt-work/103525)

<div class="topic-metadata">

**Author:** [@Artem](https://discuss.elastic.co/u/Artem)\
**Replies:** 0\
**Last updated:** [October 11, 2017, 9:47am UTC](https://discuss.elastic.co/t/more-like-this-search-doesnt-work/103525 "2017-10-11T09:47:47Z")

</div>

Hi, there. Trying to use more\_like\_this function and seems like it doesn't work at the latest version of ES. Any ideas what is wrong? -----I have created index ---- PUT /test\_index2 { "mappings": { "doc": { "proper…

---

## [How to debug Java GraphExploreRequestBuilder](https://discuss.elastic.co/t/how-to-debug-java-graphexplorerequestbuilder/103211)

<div class="topic-metadata">

**Author:** [@Martin\_Becker](https://discuss.elastic.co/u/Martin_Becker)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 9:43am UTC](https://discuss.elastic.co/t/how-to-debug-java-graphexplorerequestbuilder/103211 "2017-10-11T09:43:21Z")

</div>

Hello there. I am writing a tool to query the Graph-API to get additional recommendations for customer choices. I wrote a function which takes some input parameters and creates a GraphExploreRequestBuilder, a Hop, a Ver…

---

## [Rename field elasticsearch 1.3.2](https://discuss.elastic.co/t/rename-field-elasticsearch-1-3-2/103487)

<div class="topic-metadata">

**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\
**Replies:** 2\
**Last updated:** [October 11, 2017, 8:57am UTC](https://discuss.elastic.co/t/rename-field-elasticsearch-1-3-2/103487 "2017-10-11T08:57:05Z")

</div>

Hi Is it possible to rename a field on a mapping? with zero downtime? On elasticsearch version 1.3.2 /Juan

---

## [Watcher - filters aggregation](https://discuss.elastic.co/t/watcher-filters-aggregation/102881)

<div class="topic-metadata">

**Author:** [@SriniSn](https://discuss.elastic.co/u/SriniSn)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 8:22am UTC](https://discuss.elastic.co/t/watcher-filters-aggregation/102881 "2017-10-11T08:22:14Z")

</div>

My use case is to count errors vs non-errors in the dataset and use former being X % of latter as criteria to trigger an alert. Am I correct with using filters aggregation to approach this alert? Also, I've few groupin…

---

## [Watcher with ES 2.4 shield -- SSL handshake](https://discuss.elastic.co/t/watcher-with-es-2-4-shield-ssl-handshake/102927)

<div class="topic-metadata">

**Author:** [@ankush\_singh](https://discuss.elastic.co/u/ankush_singh)\
**Replies:** 5\
**Last updated:** [October 11, 2017, 8:19am UTC](https://discuss.elastic.co/t/watcher-with-es-2-4-shield-ssl-handshake/102927 "2017-10-11T08:19:27Z")

</div>

Hi, I am trying to integrate pagerduty with es watcher. My ES 2.4 has shield enabled. While watcher get and event it is not able to trigger action event.While checking status of watcher history, i get below response: W…

---

## [Call REST API using ingest pipeline script processor](https://discuss.elastic.co/t/call-rest-api-using-ingest-pipeline-script-processor/103468)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 8:14am UTC](https://discuss.elastic.co/t/call-rest-api-using-ingest-pipeline-script-processor/103468 "2017-10-11T08:14:37Z")

</div>

Hello Team, Is is possible to call any REST API through the ingest pipeline script processor? Thanks, Rohan

---

## [Terms Aggregation on billions of documents](https://discuss.elastic.co/t/terms-aggregation-on-billions-of-documents/103326)

<div class="topic-metadata">

**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 8:02am UTC](https://discuss.elastic.co/t/terms-aggregation-on-billions-of-documents/103326 "2017-10-11T08:02:07Z")

</div>

Hi, I'm wondering if anyone has any experience with running terms aggregations, with a sub sum aggregation, on a very large index (~100 billion documents). The documents themselves are relatively small (~20 fields). Som…

---

## [First time cluster installation- cluster status red](https://discuss.elastic.co/t/first-time-cluster-installation-cluster-status-red/103234)

<div class="topic-metadata">

**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 7:56am UTC](https://discuss.elastic.co/t/first-time-cluster-installation-cluster-status-red/103234 "2017-10-11T07:56:08Z")

</div>

Hello, I am trying to setup my first ES cluster with 3 nodes, all master. During the setup of the cluster I was rebooting the ES service on the nodes which seems to have corrupted some of the indexes in the nodes(I beli…

---

## [Search query not doing fetches](https://discuss.elastic.co/t/search-query-not-doing-fetches/101947)

<div class="topic-metadata">

**Author:** [@toka](https://discuss.elastic.co/u/toka)\
**Replies:** 4\
**Last updated:** [October 11, 2017, 7:40am UTC](https://discuss.elastic.co/t/search-query-not-doing-fetches/101947 "2017-10-11T07:40:29Z")

</div>

Hi guys, I'm checking through the field search.fetch\_total of the \_nodes/stats API how many fetches a search query is triggering, but it's not triggering any fetch. I tried to add different filters with random values t…

---

## [Painless current date](https://discuss.elastic.co/t/painless-current-date/102589)

<div class="topic-metadata">

**Author:** [@fluffierbump](https://discuss.elastic.co/u/fluffierbump)\
**Replies:** 1\
**Last updated:** [October 11, 2017, 7:36am UTC](https://discuss.elastic.co/t/painless-current-date/102589 "2017-10-11T07:36:52Z")

</div>

I'm trying to write a painless script that will return the current date minus 2hours in a format like this - 2017-10-03T11:42:44.279Z Can I do this in painless?

---

## [Docker ElasticSearch data directory mount to NFS availability](https://discuss.elastic.co/t/docker-elasticsearch-data-directory-mount-to-nfs-availability/103351)

<div class="topic-metadata">

**Author:** [@erdarun](https://discuss.elastic.co/u/erdarun)\
**Replies:** 0\
**Last updated:** [October 10, 2017, 11:15am UTC](https://discuss.elastic.co/t/docker-elasticsearch-data-directory-mount-to-nfs-availability/103351 "2017-10-10T11:15:02Z")

</div>

Hi, I am using elasticsearch 5.5.1 in docker with 4 nodes(all master) cluster where data directory of all nodes mounted to common host NFS(Network File System). If NFS mounted drive disconnected from any elasticsearch …

---

## [Periodically indexing SQL data to ES using Logstash](https://discuss.elastic.co/t/periodically-indexing-sql-data-to-es-using-logstash/103335)

<div class="topic-metadata">

**Author:** [@Mohammed\_Sanaulla](https://discuss.elastic.co/u/Mohammed_Sanaulla)\
**Replies:** 4\
**Last updated:** [October 11, 2017, 5:44am UTC](https://discuss.elastic.co/t/periodically-indexing-sql-data-to-es-using-logstash/103335 "2017-10-11T05:44:34Z")

</div>

We want to index data from SQL into ES using Logstash. The data indexed in ES will be a nested object and the nested object has to be constructed by combining data from multiple rows i.e grouping based on some common val…

---

## [Help with sum and max query](https://discuss.elastic.co/t/help-with-sum-and-max-query/102941)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 6\
**Last updated:** [October 11, 2017, 4:03am UTC](https://discuss.elastic.co/t/help-with-sum-and-max-query/102941 "2017-10-11T04:03:09Z")

</div>

Hi experts. I having problem when i want to sum the max value field. My query to take the max value field { "size":0, "query": { "bool": { "must": \[ {"term": {"zone\_id" : "1"…

---

## [Bunch of errors when running curator test suite command](https://discuss.elastic.co/t/bunch-of-errors-when-running-curator-test-suite-command/103449)

<div class="topic-metadata">

**Author:** [@atgraphy](https://discuss.elastic.co/u/atgraphy)\
**Replies:** 6\
**Last updated:** [October 11, 2017, 3:27am UTC](https://discuss.elastic.co/t/bunch-of-errors-when-running-curator-test-suite-command/103449 "2017-10-11T03:27:56Z")

</div>

When I run python setup.py test, I get this output. Does anyone get the same error? ----- No handlers could be found for logger "elasticsearch.trace" test\_add\_and\_remove (test.integration.test\_alias.TestCLIAlias) ... FA…

---

## [Translog Corruption- AccessDeniedException -in ElasticSearch](https://discuss.elastic.co/t/translog-corruption-accessdeniedexception-in-elasticsearch/101608)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 10\
**Last updated:** [October 11, 2017, 3:05am UTC](https://discuss.elastic.co/t/translog-corruption-accessdeniedexception-in-elasticsearch/101608 "2017-10-11T03:05:44Z")

</div>

Hi, I came across few instances where the shards went into "Unassigned" state and failed to recover. The logs indicated a possible translog corruption with the following exception- IndexShardRecoveryException\[failed …

---

## [Elasticsearch utilize too many file system cache](https://discuss.elastic.co/t/elasticsearch-utilize-too-many-file-system-cache/102779)

<div class="topic-metadata">

**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\
**Replies:** 7\
**Last updated:** [October 11, 2017, 1:42am UTC](https://discuss.elastic.co/t/elasticsearch-utilize-too-many-file-system-cache/102779 "2017-10-11T01:42:29Z")

</div>

Currently I had a cluster with 2 master nodes and 3 data nodes, with each data nodes having 32GB of RAM... At first everything went fine, but after adding many indices I found out that the RAM usage for the data nodes a…

---

## [7 Node Cluster with 3 dedicated master and 4 data nodes](https://discuss.elastic.co/t/7-node-cluster-with-3-dedicated-master-and-4-data-nodes/103060)

<div class="topic-metadata">

**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\
**Replies:** 11\
**Last updated:** [October 10, 2017, 10:42pm UTC](https://discuss.elastic.co/t/7-node-cluster-with-3-dedicated-master-and-4-data-nodes/103060 "2017-10-10T22:42:52Z")

</div>

Hi All, I am setting up 7 node cluster with 3 dedicated master only and 4 data only nodes, my hosts are not bare metal hosts but JVM's . What should be my memory setting for each host ( master and data nodes) . What s…

---

## [Help with setting up cluster on 1 server](https://discuss.elastic.co/t/help-with-setting-up-cluster-on-1-server/103273)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 6\
**Last updated:** [October 10, 2017, 10:37pm UTC](https://discuss.elastic.co/t/help-with-setting-up-cluster-on-1-server/103273 "2017-10-10T22:37:43Z")

</div>

I am hoping to get help with setting up a multinode 6.x/rc ES cluster on a single server. I just can't find a good step by step guide on how to do this on Ubuntu from scratch. Ideally it would give best settings for th…

---

## [Mapping from Logstash to Elasticsearch](https://discuss.elastic.co/t/mapping-from-logstash-to-elasticsearch/103435)

<div class="topic-metadata">

**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\
**Replies:** 0\
**Last updated:** [October 10, 2017, 8:28pm UTC](https://discuss.elastic.co/t/mapping-from-logstash-to-elasticsearch/103435 "2017-10-10T20:28:53Z")

</div>

Hi! I have several different mapping types in a particular mapping (H, D, D1, D2, D3....D8). I am trying to write a logstash configuration to push data to these mappings based on a particular check. I extract the firs…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1923)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1925)
